CVE-2026-82677

Name of the Vulnerable Software and Affected Versions valkey-io valkey version 9.1.0

Description A double free issue exists in the Module Timer Subsystem within the moduleTimerHandler() function located in the src/module.c file. This flaw allows a remote attacker to trigger a double free, which occurs when the system attempts to free the same memory location twice, potentially leading to a crash or arbitrary code execution.

Recommendations Deploy patch b349fe2821e3998534b1454c1b64a478daf8c6b7 for version 9.1.0.